JURNAL: PEMBUATAN RENCANA KEAMANAN INFORMASI BERDASARKAN ANALISIS DAN MITIGASI RISIKO TEKNOLOGI INFORMASI

Abstract

An information security plan consists of strategies and shared responsibility, the main aim is to reduce the risk of a potential threat to the company's operations. If the security plan is not based on the results of risk analysis, can cause weakness in the strategy to anticipate the threat of disruption and attacks on corporate assets. Weak strategy, caused by the process of identifying weaknesses and vulnerabilities of information technology is not done properly. Instead of the security plan should be based on the results of analysis and information technology risk mitigation, so that the security of the proposed strategy can effectively reduce the risks identified through risk analysis and mitigation. The process of risk analysis in addition to producing the identification of risk, also providing recommendations appropriate security controls with the risk would be reduced. The recommended security controls on risk analysis, will then be evaluated from the aspects of effectiveness and efficiency in reducing any risk, the risk mitigation process, so that this process will provide a strong foundation in information security plan to determine an overall, effective and efficient, since it is based with the impelementasinya priority.

Keywords: risk analysis, risk mitigation, Information Security Plan

Pendahuluan

Tahapan dalam pembuatan rencana keamanan informasi dapat disusun berdasarkan gangguan yang pernah terjadi, lokasi penyimpanan aset informasi, atau pemilihan perangkat keamanan yang sesuai dengan dana perusahaan. Terkadang pula rencana keamanan dituliskan dengan format dan isi yang berbeda-beda, sehingga perlu dilakukan penelitian tentang bagaimana rencana keamanan informasi yang bukan saja secara efektif menurunkan risiko, juga secara efisien dalam implementasinya. Pertanyaan penelitian ini perlu diawali dengan pemahaman terhadap rencana keamanan informasi yang lengkap, dan dukungan hasil analisis risiko dan mitigasi.

Peneliti: Aan AlBone

Untuk lebih lengkapnya silahkan download di link berikut: